Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ONPzKYRSJd0ltOTTJH2HAfT2RDw.roa
File: ONPzKYRSJd0ltOTTJH2HAfT2RDw.roa (raw, json)
Hash identifier: em28A9TDxo7EzYjxhUXx5mbIi9Kb4il9df4TPijZNPM=
Subject key identifier: 38:D3:F3:29:84:52:25:DD:25:B4:E4:D3:24:7D:87:01:F4:F6:44:3C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EC2C0B3C57D128834DDD4DBEF8AA96512
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ONPzKYRSJd0ltOTTJH2HAfT2RDw.roa
Signing time: Tue 09 Apr 2024 12:06:32 +0000
ROA not before: Tue 09 Apr 2024 12:06:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.144.0/23 maxlen: 23
46.38.150.0/24 maxlen: 24
46.38.156.0/23 maxlen: 23
109.94.164.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.24.148.0/24 maxlen: 24
185.24.149.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.24.151.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.87.0/24 maxlen: 24
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:c0:b3:c5:7d:12:88:34:dd:d4:db:ef:8a:a9:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 9 12:06:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d3f329845225dd25b4e4d3247d8701f4f6443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:e0:60:1e:57:20:28:2e:fd:96:84:99:ff:
19:90:44:0c:2c:98:0e:35:38:bb:71:a9:61:fb:26:
77:9a:e2:bc:ab:ec:c3:33:76:78:55:fc:2c:44:51:
1c:3f:45:64:a2:8b:75:9e:8e:ab:c0:fa:2c:5b:a2:
b1:77:eb:f3:e8:84:a8:eb:9a:39:b0:07:6d:70:47:
00:ad:6a:06:7f:39:73:b6:7a:d8:e8:21:2a:e1:f9:
fa:b2:2d:f4:b3:46:f7:cb:1f:a7:78:ac:c1:19:8d:
9a:b9:08:d4:35:1c:9b:0a:e5:2b:0d:c3:1c:f1:ba:
c4:e5:94:24:1a:5e:bc:96:ea:a1:08:e5:4e:19:d8:
bb:f0:05:22:32:39:45:3f:f2:e7:05:90:ac:99:55:
f7:4a:53:ee:c9:f0:5f:46:df:16:e9:8a:92:35:dd:
c5:f1:43:13:8b:56:5d:cc:5c:dc:79:c0:a2:26:1c:
4c:0b:69:d2:91:85:31:58:54:41:a3:2d:ae:e1:b0:
93:d2:c6:3b:62:b9:3f:7a:10:6e:e8:e4:60:92:63:
de:17:d2:c5:73:4d:1f:2e:72:e3:ec:4d:ad:af:4c:
84:c0:47:94:ed:6a:33:77:7f:00:97:00:71:17:6d:
ad:ca:00:f0:c0:3f:58:c3:0c:de:9a:20:f9:19:37:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:F3:29:84:52:25:DD:25:B4:E4:D3:24:7D:87:01:F4:F6:44:3C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ONPzKYRSJd0ltOTTJH2HAfT2RDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0-46.38.140.255
46.38.144.0/23
46.38.150.0/24
46.38.156.0/23
109.94.164.0/23
185.24.148.0/22
185.29.220.0/22
185.143.74.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
48:b5:9f:7a:d4:13:97:4e:a6:7e:b1:58:37:75:52:36:ec:4a:
ab:d3:41:3d:ac:c9:5f:95:2c:9d:e9:c2:48:cd:bc:a8:10:ec:
a8:eb:10:00:58:e6:0c:bc:8d:a4:29:be:78:1e:e9:bd:7a:15:
67:df:61:82:da:81:8e:2b:44:55:61:3c:3a:f5:3c:4a:59:af:
77:ad:8d:97:2c:73:ef:4f:e9:bc:ce:dd:54:2c:c2:db:f5:53:
0e:ce:19:79:9f:7e:70:b7:6b:5d:4c:04:a0:a5:38:8c:3c:ce:
d8:de:0d:33:de:8a:0e:f5:16:bc:06:c3:50:b2:3a:76:d5:3e:
37:15:b0:ab:4f:f8:f3:e1:06:68:9f:65:2a:cb:91:14:2f:03:
df:89:d1:75:81:bf:e9:0e:8a:2f:a3:b4:35:28:a0:86:90:1e:
69:b2:7a:86:37:d3:8d:0a:d0:71:ac:40:99:49:cb:71:20:05:
76:5f:ed:07:78:69:58:ef:56:74:a5:9b:02:db:0b:5f:ce:92:
ef:3d:ca:09:5c:02:07:89:7a:98:de:df:fc:b1:2e:f9:02:f4:
a4:9f:83:7a:f9:89:1d:87:08:6d:28:12:67:52:bd:d2:bb:18:
c0:0f:ff:8a:bd:58:37:eb:55:a7:e3:9f:7a:d6:e5:75:0a:e2:
eb:1f:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:41:34 2024 by rpki-client on console-ams.rpki-client.org